Disable shares for deactivated users #31444
Labels
0. Needs triage
Pending check for reproducibility or if it fits our roadmap
enhancement
feature: sharing
How to use GitHub
Is your feature request related to a problem? Please describe.
Implemented in #17077, share links are disabled for deactivated users. In my opinion, this should also happen with normal shares to other users. At the moment, a shared folder of a disabled user is still accessable by others.
Describe the solution you'd like
If a user is deactivated, shares from this user should no longer be visible / accesable for others.
Describe alternatives you've considered
I didn't found an easy way of deactivate shares of a user. My (ugly) solution is to backing up oc_share of this user in a table with same schema
insert into my_share_backup select * from oc_share where uid_owner='userid';
and setting permissions in oc_share to 0update oc_share set permissions=0 where uid_owner='userid'
, restore data on re-activation of user.Additional context
We need this for 2 reasons:
First, if deactivating someone because auf violation of TOS, noone should be able to change or access the users data.
Second, if accounts expire, they are deactivated but not removed for a grace period. During this time also the data should not be accessable through other accounts.
(Using NC 22.2.5)
The text was updated successfully, but these errors were encountered: